CVE-2026-126329
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
40/100
Published: 2026-11-12
Modified: 2026-11-12
First seen: 2026-11-12
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
Present
VC:
High
VI:
High
VA:
High
Description
Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substitute control-plane sockets and configuration trusted by the root process, potentially executing commands as root. Exploitation requires a privileged invocation with an attacker-influenced environment. The issue affects Linux and macOS and is fixed in version 0.53.0.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Docker | Docker Sandboxes | 0.7.0 < 0.53.0 |
References & Advisories (1)
product